Powered by MOMENTUM MEDIA
cyber daily logo
Breaking news and updates daily. Subscribe to our Newsletter

Major US fuel distributor allegedly breached by Black Basta

Infamous hacking group Black Basta has listed one of the largest fuel distributors in the US on its dark web leak site, claiming to have stolen over 700 gigabytes of data.

user icon Daniel Croft
Wed, 22 May 2024
Major US fuel distributor allegedly breached by Black Basta
expand image

Atlas Oil is a major US fuel distributor responsible for delivering over 1 billion gallons (3.78 billion liters) of fuel annually to 49 states.

Black Basta listed the group on its dark web leak site earlier this week, claiming to have stolen 730 gigabytes of data from its network.

According to the listing, data includes user and employee data, corporate data from accounts, HR, finance, and executives, department data, and more.

============
============

The ransomware gang also posted a sample of stolen data, which shows a file tree of company files, which include audit folders, billing, payroll, legal and a number of folders with specific names.

The sample also shows scans and screenshots of individual passports, birth certificates, legal documents, pay slips, medical documents, and more.

Despite this, Atlas Oil has yet to confirm the attack publicly.

It is unclear whether or not Black Basta has reached out to Atlas Oil with ransom demands, but the threat group has set a countdown timer on the listing for when the entirety of the data will be published if a ransom is not paid. At the time of writing, the countdown had just over six days left.

Cyber Daily has reached out to Atlas Oil for comment.

Black Basta has launched attacks on a number of high-profile Australian companies in the past, most recently on Australian pie and pastry brand Vili’s.

The group claimed to have exfiltrated roughly 350 gigabytes of data from the company, posting a sample as proof.

Data reportedly included employee information and personal documents, financial data, incident reports, employee folders and files and more.

Prior to that, just under a dozen Australian companies were named in an apparent hosting service hack, with 700 gigabytes stolen.

Daniel Croft

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.

newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.